Community review patch:
- Resolve settings and CSS review warnings without changing commands or user configuration.
- Use declarative settings rendering, standard headings, and update() refreshes.
- Remove innerHTML and broad CSS :has() selectors.
- Include build-provenance attestations for main.js and styles.css.
This patch supersedes the withdrawn 3.4.0 release.
Validation: ESLint, TypeScript, production build, npm audit, and 46 regression tests pass.